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e) completing the change document command by performing the change document 
command upon the encrypted file instead offthe file; and 

f) invoking an option to initiate a virus scan program; 
wherein steps c) and d) further compri^p the steps of: 

selecting an algorithm to use with the file from one of a plurality of encryption algorithms; 
selecting an encryption key with a key value; 

generating a file identifier from the encryption key, an algorithm identifier associated with 
the algorithm and a data identifier associated wjth the file; 
adding the file identifier to the file; and 
using the key value and the algorithm to dncrypt the file. 

48. A method as recited in claim 47, comprising the further step of: 
running a virus scan program on the file before it is encrypted. 

49. A method as recited in claim 47, comprising the further steps of: 
selecting the file from within the contents of a second file that is larger than the file. 



50. A method as recited in claim 49, compising the further steps of: 



creating a third file from the second file whe 



and the portion of the second file that does not include the file 



jein the third file contains the encrypted file 



51. A method as recited in claim 50, wierein the encrypted file is located in a 
container. 
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52. A method as recited in clain 47, wherein the algorithm is selected from the 
plurality of encryption algorithms according to a pre-selected criteria. 

53. A method as recited in clainj 47, wherein the algorithm is selected from the 
plurality of encryption algorithms according tc a pre-selected algorithm. 

54. A method as recited in claim ^7, wherein the file identifier is inserted into the file 
according to a pre-selected criteria. 




55. A method as recited in claim 4p, wherein the file identifier is inserted into the file 
according to a pre-selected algorithm. 



56. A method as recited in claim 47L wherein there are plural encryption key values 
and at least one encryption key value associated with the user. 

57. A method as recited in claim 56, CDmprising the further steps of: 



requiring the user to submit to an access 



and d), but if the access authentication step 



authentication step; and 



if the access authentication step does n )t authenticate the user, then skipping steps c) 



oes authenticate the user, then retrieving the 



encryption key value associated with the encryption key name and the user. 



58. A method of decrypting an electronic file that is to be opened in an application 
program running in a suitable environment requjred for operating the program, comprising the 
steps of: 

a) issuing an open document command! to act upon the file; 
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b) 
c) 
d) 



intercepting the open documenj command; 

I 



retrieving a decryption key value; 

decrypting the file using the decryption key value to create an unencrypted file; 



and 



e) completing the open document command by performing the open document 



command upon the unencrypted file instead of 
wherein steps c) and d) further comprise 
selecting an algorithm to use with the file 



he file; 
the steps of: 

from one of a plurality of encryption algorithms; 
inputting a decryption key with a key valiie; 

validating the decryption key value with ttie key value associated with a file identifier; and 
using the key value and the algorithm to c ecrypt the file; and 
invoking an option to initiate a virus scan )rogram. 



59. A method of decrypting an electrc nic file that is to be opened in an application 
program running in a suitable environment requ red for operating the program, comprising the 
steps of: 
a) 
b) 
c) 
d) 



issuing an open document command to act upon the file; 
intercepting the open document compiand; 
retrieving a decryption key value; 

decrypting the file using the decryption key value to create an unencrypted file; 



and 



e) completing the open document conmand by performing the open document 



command upon the unencrypted file instead of the fi 
wherein steps c) and d) further comprise the s 
selecting an algorithm to use with the file from 



e; 

teps of: 

one of a plurality of encryption algorithms; 
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inputting a decryption key with a keylvalue; 

validating the decryption key value with the key value associated with a file identifier; and 
using the key value and the algorithm to decrypt the file; and 
running a virus scan program on the |ecrypted file. 



selecting an algorithm to use with the 
selecting an encryptj(>n key with a ke^ 



60. A method for encrypting and qecrypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

file from the plurality of encryption algorithms; 
value; 



generating a file identifier from the encryption key, an algorithm identifier associated with 





the algorithm and a data identifier associatec 
adding the file identifier to the file; 
using the key value and the algorithm 



with the file; 



o encrypt the file and generate an encrypted file; 
uniquely identifying the encrypted file with an encrypted data identifier during encryption; 
inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated with the file identifier; 
using the key value and the algorithm toldecrypt the file; and 

testing the encrypted data identifier after decryption by regenerating the encrypted data 
identifier and ascertaining that they are the same. 



61 . A method as recited in claim 60, 
selecting the file from within the contents 



cc mprising the further step of: 
of a second file that is larger than the file. 



62. A method as recited in claim 61, wherein the encrypted file is placed in a 
container. 1 
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63. A method as recited in claim! 62, comprising the further step of: 
creating a third file from the secona file wherein the third file contains the container and 
the portion of the second file that does not Include the file. 



64. A method as recited in claim 



(i3, wherein the container is represented in the third 



file. 




65. A method as recited in claim 
thod is appropriate to the way the file is re 



s wherein the decryption is initiated with whatever 
>resented in the third file. 



^ 66. A method as recited in claim 64 ,\ wherein the second file is recreated from the third 

A/ne after the file is decrypted. 

67. A method as recited in claim 66, comprising the further step of: 
running a virus scan program on the second file after it is recreated. 



68. A method for encrypting and decrypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

selecting an algorithm to use with the file frbm the plurality of encryption algorithms; 
selecting an encryption key with a key value 

generating a file identifier from the encryption key, an algorithm identifier associated with 
the algorithm and a data identifier associated with |he file; 
adding the file identifier to the file; 

using the key value and the algorithm to endrypt the file and generate an encrypted file; 

\ 
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inputting a decryption key with a decryption key value; 

validating the decryption key value wfth the key value associated with the file identifier; 



and 



using the key value and the algorithm tc 
wherein the file is located in a documen 



decrypt the file; 
or image repository. 




69. A method for encrypting and dec|ypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

selecting an algorithm to use with the filelfrom the plurality of encryption algorithms; 
selecting an encryption key with a key value; 

generating a file identifier from the encryption key, an algorithm identifier associated with 
/V^ the algorithm and a data identifier associated wi|h the file; 
W\] adding the file identifier to the file; 

using the key value and the algorithm to dncrypt the file and generate an encrypted file; 
sending the encrypted file from a first peijson to a second person over the Internet in an 
e-mail message; 

inputting a decryption key with a decryptioh key value; 

validating the decryption key value with tqe key value associated with the file identifier; 

and 



using the key value and the algorithm to de 



rypt the file. 



70. A method as recited in claim 69, wherein the first person is the same as the 
second person. 
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selecting an algorithm to use with 
selecting an encryption key with a 
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71. A method for encrypting ar^ decrypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

the file from the plurality of encryption algorithms; 
key value; 

generating a file identifier from the encryption key, an algorithm identifier associated with 
the algorithm and a data identifier associated with the file; 
adding the file identifier to the file; 

using the key value and the algorithm to encrypt the file and generate an encrypted file; 
inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated with the file identifier; 



and 



using the key value and the algorithm to decrypt the file; 

wherein a portion of the file identified is encrypted before it is inserted into the file. 



72. A method as recited in claim n , comprising the further step of decrypting a portion 
of the file identifier before the decryption key value is validated. 

73. A method as recited in claim 7|2, wherein all of the file identifier is encrypted before 
the decryption key value is validated. 



74. A method for encrypting and (fecrypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

selecting an algorithm to use with thejfile from the plurality of encryption algorithms; 
selecting an encryption key with a key value; 
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3 encryption key, an algorithm identifier associated with 



generating a file identifier from th 
the algorithm and a data identifier associated with the file; 
adding the file identifier to the file 

using the key value and the algorithm to encrypt the file and generate an encrypted file; 
inputting a decryption key with a decryption key value; 



validating the decryption key valuer 
using the key value and the algori 
and invoking an option to initiate ^ 



with the key value associated with the file identifier; 
hm to decrypt the file; 
virus scan program. 




75. A method for encrypting anjd decrypting a file with one of a plurality of encryption 
algorithms, comprising the steps of: 

selecting an algorithm to use with the file from the plurality of encryption algorithms; 
selecting an encryption key with a wey value; 

generating a file identifier from the Encryption key, an algorithm identifier associated with 
he algorithm and a data identifier associated with the file; 
adding the file identifier to the file; 

running a virus scan program on the file before it is encrypted; 

using the key value and the algorithm to encrypt the file and generate an encrypted file; 



inputting a decryption key with a deer 



ption key value; 



validating the decryption key value w th the key value associated with the file identifier; 



and 



using the key value and the algorithm 
wherein a portion of the file identifier is 



;o decrypt the file; 

encrypted before it is inserted into the file. 
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76. A method for encrypting a fjle with one of a plurality of encryption algorithms, 
comprising the steps of: i 

selecting an algorithm to use with thelfile from the plurality of encryption algorithms; 
selecting an encryption key with a key^ value; 

generating a file identifier from the encryption key, an algorithm identifier associated with 
the algorithm and a data identifier associated with the file; 

adding the file identifier to the file;usincj[ the key value and the algorithm to encrypt the file 
and generate an encrypted file; and 

uniquely identifying the encrypted file with an encrypted data identifier. 



77. A method of decrypting an encrypted file with one of a plurality of encryption 
algorithms, comprising the steps of: 



selecting an algorithm to use with the 
algorithms; 

inputting a decryption key with a decrypti 



encrypted file from the plurality of encryption 



n key value; 



validating the decryption key value with q key value associated with a file identifier that 
was added to a file during an encryption process that created the encrypted file; 
using the key value and the algorithm to de crypt the encrypted file; and 
testing an encrypted data identifier that is used to uniquely identify the encrypted file 
during the encryption process by regenerating the 
they are the same. 



encrypted data identifier and ascertaining that 



